# Internet Identity Roadmap Update, August 2022

**URL:** <https://forum.dfinity.org/t/internet-identity-roadmap-update-august-2022/14657>\
**Category:** internet-identity\
**Created:** [August 2, 2022, 1:34pm UTC](https://forum.dfinity.org/t/internet-identity-roadmap-update-august-2022/14657 "2022-08-02T13:34:56Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![nmattia](https://sea1.discourse-cdn.com/flex023/user_avatar/forum.dfinity.org/nmattia/32/3726_2.png) [@nmattia](https://forum.dfinity.org/u/nmattia)\
**Post date:** [August 2, 2022, 1:34pm UTC](https://forum.dfinity.org/t/internet-identity-roadmap-update-august-2022/14657/1 "2022-08-02T13:34:56Z")

</div>

Hi all,

Here’s the August update for the Internet Identity team’s roadmap! You can find the July update [here](https://forum.dfinity.org/t/internet-identity-roadmap-update-july-2022/14096).

 ![l2_kanban_2022-08-02_03.19pm](https://us1.discourse-cdn.com/flex023/uploads/dfn/original/2X/b/ba2458f8e6c2162548000c7abf885fd25a99a26b.png)

First thing I want to point out is that we’re right in the middle of holiday season, so we’re operating at a slower pace. That being said, let’s have a look at what’s happened in July, and what we plan on achieving in August!

- Protected Recovery phrases are a thing! Thanks to everyone who contributed code and idea. You can read the announcement [here](https://forum.dfinity.org/t/protected-recovery-phrases-released-available-now/14156) and the feature thread [here](https://forum.dfinity.org/t/protected-recovery-phrases-plan-and-progress/12950).
- We’ve implemented a new feature called “Alternative Origins” which lets (d)apps tell II to use another URL as the origin (used when computing the II pseudonyms). The feature is mostly stable though we’re hashing out the last details with the people building `dfx` and `agent-js` to make sure it is fully supported there as well. Here’s the [original announcement](https://forum.dfinity.org/t/release-announcement-canister-chosen-alternative-origins/14264), and stay tuned for updates!
- We’re allocating more resources for working on the UI, so expect some changes there! II devs have pretty much all been backend people, who did their best to get the frontend together. Well, that’s about to change! We got some frontend people helping us polish things and figure out the III: Internet Identity … Identity. 😅 We’ll keep everyone in the loop and look forward to your feedback on this.

The rest is still being planned or worked on (domain migration, canister migration, etc…) and we’ll let you know once we have more news to share – but as mentioned, it’s the holiday season, and we need to sharpen our axes to start chopping down some big proverbial trees this autumn!

Bye 👋

---

<div class="post-metadata">

**Author:** ![weedpatch2](https://sea1.discourse-cdn.com/flex023/user_avatar/forum.dfinity.org/weedpatch2/32/3385_2.png) [@weedpatch2](https://forum.dfinity.org/u/weedpatch2)\
**Post date:** [August 10, 2022, 4:08pm UTC](https://forum.dfinity.org/t/internet-identity-roadmap-update-august-2022/14657/2 "2022-08-10T16:08:12Z")

</div>

What is the plan for the “domain migration?” Is that intended to mean that ‘identity.ic0.app’ is going to change? What is it changing to and why? Is this part of the ic0.app → ic.app migration plan? Is this implying integration/implementation of a new canister naming scheme?

---

<div class="post-metadata">

**Author:** ![nmattia](https://sea1.discourse-cdn.com/flex023/user_avatar/forum.dfinity.org/nmattia/32/3726_2.png) [@nmattia](https://forum.dfinity.org/u/nmattia)\
**Post date:** [August 11, 2022, 5:20pm UTC](https://forum.dfinity.org/t/internet-identity-roadmap-update-august-2022/14657/3 "2022-08-11T17:20:05Z")

</div>

I’ll try and shed some light, although this is still very much in flux and we’re trying to figure out how to best deal with the situation.

Because of the IC’s nature, anyone can host anything on `<canister-id>.ic0.app`, meaning we’re bound to get spam and phishing sites. Those sites tend to be blacklisted, and unfortunately this may extend to `ic0.app` as a domain altogether. If browsers start blocking `ic0.app` then II won’t be accessible; for lots of canisters this is not the end of the world because at the end of the day `ic0.app` is just a DNS detail.

However for II this would be pretty bad since all WebAuthn credentials would be stuck on `identity.ic0.app`. So here we’re trying to figure out what to do, whether we’ll be migrating II to another domain or some other solution. I’m a little behind on this so would need to catch up with the latest discussions before saying anything stoopid; for instance I don’t know anything about the `ic0.app` → `ic.app` migration…
